voltaireyoung/cve-2024-31719----ami-aptio-5-vulnerabilityDemonstrates a local access control bypass in AMI Aptio 5 NvLock module, allowing modification of NVRAM variables including administrator password, with proof-of-concept video.
The attacker can easily bypass the NvLock module's access protection for NVRAM.
Once the protection is bypassed, it is effortless to modify all variables stored in NVRAM, including the administrator password.
